Radically Open Security (ROS) kindly performed a security audit of some parts of Monal.
Specifically they audited the usage of our XML query language and the implementations of SASL2, SCRAM and SSDP.
The results in a nutshell: no security issues found, read the full report here: Monal IM penetration test report 2024 1.0 .